No, just require that the password is entered to change the user's email address...

		jmaygarden on June 7, 2012 \| parent \| context \| favorite \| on: Storing Passwords Securely No, just require that the password is entered to change the user's email address. Then a new hash can be generated and stored.